CVE-2014-4448 in iOS
Résumé (Anglaise)
House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information from a Documents directory by obtaining this UID.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Réserver
20/06/2014
Divulgation
22/10/2014
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 68039 | Apple iOS Documents Directory chiffrement faible | 310 | Non prouvée | Correctif officiel | CVE-2014-4448 |